Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
File: AS213525.roa (raw, json)
Hash identifier: KJvyM2b7qKtwqd9MyV6V3knWQFb6d0nk3taCscKaDoQ=
Subject key identifier: F3:7F:C0:4A:13:92:54:BF:19:33:55:FF:4C:65:05:1A:6D:14:74:BA
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1D9B955586E5E80C3622690A098A038D283F9737
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
Signing time: Fri 24 Jan 2025 10:03:38 +0000
ROA not before: Fri 24 Jan 2025 09:58:38 +0000
ROA not after: Fri 23 Jan 2026 10:03:38 +0000
asID: 213525
IP address blocks: 195.200.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9b:95:55:86:e5:e8:0c:36:22:69:0a:09:8a:03:8d:28:3f:97:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jan 24 09:58:38 2025 GMT
Not After : Jan 23 10:03:38 2026 GMT
Subject: CN=F37FC04A139254BF193355FF4C65051A6D1474BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:27:a5:cb:25:88:be:57:55:ab:81:1d:45:
44:57:0c:85:89:fa:55:95:20:12:9b:c8:4d:06:41:
5d:c9:6f:fe:d2:20:68:79:87:19:0a:44:3f:db:13:
f6:34:e3:24:4c:cc:1c:32:c1:6b:87:a5:47:5b:6a:
ce:c4:82:89:d7:24:22:78:0c:26:e4:21:67:07:9a:
a9:c7:3c:7c:cf:33:fe:f1:42:1e:d2:af:9a:b0:44:
ca:50:e2:0c:43:f0:d5:79:1b:ef:0c:f1:ab:41:f1:
a1:06:a5:24:09:b8:51:dd:7e:fd:44:f6:44:72:50:
4d:40:6f:0e:33:f5:48:78:6a:48:75:8a:17:29:00:
6c:29:10:27:f9:b2:8e:55:e5:09:72:c1:02:1f:78:
12:28:52:61:4f:dc:c7:24:99:f0:d5:fd:57:fc:99:
3d:6b:28:d2:a7:13:c5:34:47:aa:c3:52:79:fb:87:
77:b0:60:ff:f7:38:c7:59:26:77:e6:96:87:2c:b3:
4c:c6:1d:fc:f6:89:a6:d7:77:23:86:b0:5b:e1:f2:
5b:f7:81:1d:8c:a8:99:28:c0:e2:08:dc:56:b2:d2:
a2:a0:69:26:af:4e:c9:be:af:a5:66:b5:d3:08:f8:
2d:0a:9c:53:0b:93:fb:30:26:f5:92:29:b0:7f:7e:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:C0:4A:13:92:54:BF:19:33:55:FF:4C:65:05:1A:6D:14:74:BA
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213525.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.21.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:61:7d:ec:18:d4:f2:43:ec:d1:ce:4a:1c:9a:27:d8:88:e5:
dd:8b:3e:30:63:2b:b0:03:86:2a:da:42:29:81:8e:68:a0:ec:
55:73:e6:4e:55:2e:54:39:3a:74:49:c5:e4:09:b4:e4:f9:e8:
83:59:66:54:55:bd:c8:16:c3:24:d0:c3:65:05:61:bc:90:c9:
6a:58:a0:5e:ad:ba:5e:9b:6e:d7:cc:c3:dc:56:87:0e:b7:8b:
67:85:cd:30:cc:5b:c7:fb:63:86:95:bf:95:40:29:b6:87:be:
47:74:28:a4:0a:38:b1:53:ff:63:44:1e:e5:4a:77:3a:0c:96:
e4:06:61:45:d8:7a:89:c4:fb:b9:c5:03:83:76:d4:17:38:8b:
ba:14:69:b8:80:89:76:dd:02:57:6d:0b:4c:01:b6:5c:cf:a1:
85:fa:73:78:12:c1:f1:f4:11:c2:7b:b6:a0:79:a2:0f:99:ff:
0c:9f:95:4b:55:01:42:b7:a3:a3:6b:7d:55:fc:69:94:19:89:
48:d1:c5:c3:a4:45:c4:da:9d:4c:85:bd:03:86:7c:36:ea:ba:
d4:3a:0b:9d:43:1d:c7:bb:02:9c:b7:3f:fd:30:5c:06:64:b2:
1a:48:d8:52:28:ac:2b:c3:ca:29:c6:d3:8e:4d:3c:d8:d5:ff:
52:36:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:04 2025 by rpki-client